You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
The ALZ team is consolidating azure policies and archetypes into the Azure Landing Zones Library.
Right now, the Sync-ALZPolicies script is using the enterprise-scale repository for its source to sync ALZ policies.
Describe the solution you'd like
Would it be possible to modify Sync-ALZPolicies to leverage the ALZ library instead? This would allow us to specify a specific release from the ALZ library that we want to sync into EPAC.
The ALZ library also contains archetype definitions that can be used to automatically populate the policy assignment files. I am not sure how the current ALZ JSONC files are created, at a glance it looks like they are updated in a different (perhaps manual?) process and added to this repo. I believe leveraging the ALZ library (and then alzlibtool to interact with it) to perform the sync to EPAC would be better and allow clients to sync specific release of ALZ policies in their environment.
The text was updated successfully, but these errors were encountered:
cjtous1
changed the title
Sync-ALZPolicy - Leverage the Azure-Landing-Zones-Library repo instead of Enterprise-scale?
Sync-ALZPolicies - Leverage the Azure-Landing-Zones-Library repo instead of Enterprise-scale?
Nov 8, 2024
Thanks for this - I might look at doing both - have the normal Sync-ALZPolicies grabbing the latest from the ESLZ repo and providing a parameter to specify a version which can pull from the ALZ library.
The assignments are a different story though - they don't specify in the library which scope gets which policy so that is still something I need to maintain.
Regarding assignments, there are archetype_definitions in the library here. It shows which policy/policySet is assigned to which archetype. Would that be enough to generate the assignments in EPAC?
Is your feature request related to a problem? Please describe.
The ALZ team is consolidating azure policies and archetypes into the Azure Landing Zones Library.
Right now, the Sync-ALZPolicies script is using the enterprise-scale repository for its source to sync ALZ policies.
Describe the solution you'd like
Would it be possible to modify Sync-ALZPolicies to leverage the ALZ library instead? This would allow us to specify a specific release from the ALZ library that we want to sync into EPAC.
The ALZ library also contains archetype definitions that can be used to automatically populate the policy assignment files. I am not sure how the current ALZ JSONC files are created, at a glance it looks like they are updated in a different (perhaps manual?) process and added to this repo. I believe leveraging the ALZ library (and then alzlibtool to interact with it) to perform the sync to EPAC would be better and allow clients to sync specific release of ALZ policies in their environment.
The text was updated successfully, but these errors were encountered: